solution document - manageengine · pdf filesolution document . ... management module: active...

Solution Document

www.admanagerplus.com

Introduction 3

ADManager Plus: Under the hood 4

Modules 5

Access to ADManager Plus’s Features 6

Management Module: Active Directory, MS Exchange, 7Office 365, Skype for Business (Lync), and Google Apps

Reporting Module: Active Directory, MS Exchange, 9Office 365, and Google Apps

Customizable Workflow 11

Help Desk Delegation 12

Active Directory Automation 13

ADManager Plus Mobile Apps 14

ADManager Plus Support 15

1

2

3

4

5

6

7

8

9

www.admanagerplus.com

Contents

1.Introduction

ManageEngine ADManager Plus is a web-based Active Directory (AD) management and reporting software. It is simple-to-use and user friendly. Besides AD, it also provides management and reporting features for Exchange Server, Office 365, Skype for Business (Lync), and Google Apps in the same console. It offers a multitude of capabilities including:

This document provides:

A short explanation about ADManager Plus' working.

A simple diagrammatical representation of the anatomy of ADManager Plus.

An introduction to each module of ADManager Plus along with its features and highlights.

www.admanagerplus.com3

One-click AD, O365, Exchange, Skype for Business, and Google Apps user creation.

Template and CSV-based bulk user management.

150+ prepackaged, actionable reports.

OU-based help desk delegation.

Automation for routines such as AD cleanup.

iOS & Android mobile apps, and much more!

2. ADManager Plus: Under the hood

ADManager Plus is an off-the-shelf web-based Active Directory management and reporting solution. It is based on the web application server-client framework and also includes a built-in database.

Installing ADManager Plus is quite simple. You just have to download the product’s EXE from the website, run it and follow the instructions in the install shield. Based on your need, you can run ADManager Plus as a console application or as a service. You can install ADManager Plus on any Windows machine that has a P4 – 1 GHz processer, 1GB RAM, 2 GB disk space and turn it into an ADManager Plus server. You can then access this server and its services via web-browsers. For optimum efficiency, we recommend that you install it on Windows 2000/ 2003/ 2008/ 2008 R2/ 2012/ 7/ 8/ 10. By default, ADManager Plus is installed as a console application. It runs with user’s privileges when you install it as an application. When installed as a service, ADManager Plus runs with the privileges of the system account.


ADManager Plus Overview

ADManager Plus server offers several predefined functions and routines that solve your day-to-day Active Directory challenges. Based on their functionalities, these routines are grouped into four major modules namely:

Management:Provisions, re-provisions, and de-provisions Active Directory objects in bulk; also offers template and CSV-based Active Directory account management.

Reporting:Consists of 150+ preconfigured, schedulable reports; many reports also come with the ability to re-provision/manage accounts.

Delegation: Foolproof delegation system that allows you to delegate even crucial tasks like account provisioning to non-technical users.

Automation:A scheduler exclusively for Active Directory tasks; allows you to schedule and execute Active Directory management tasks.

Further, ADManager Plus also offers a flexible workflow that introduces checkpoints to prevent unauthorized/harmful changes in Active Directory.

To perform any change/update in Active Directory, ADManager Plus must be provided with the relevant permissions. So, you have to supply it with an all-inclusive account to provide the privileges required to perform any management action.

When a user logs on to ADManager Plus server to perform any task, it first verifies the user’s credentials; it also checks if the user has the appropriate privileges in ADManager Plus to perform that task. Then, based on the task type, the appropriate module performs the required actions and completes the task. For example, if the task is user creation, the management module will create the user in Active Directory.


ADManager Plus’s Modules


When you interact with the ADManager Plus server from a web-browser (or a smartphone / mobile device) the communication happens via HTTP protocol. For enhanced security, there is also an option to enable HTTPS protocol.

All communication/interaction between ADManager Plus server and Active Directory happens via LDAP protocol.

Communication Method

The product and its features can be accessed using two types of accounts – the default ADManager Plus accounts and the technician accounts (imported from Active Directory).

ADManager Plus’s built-in accounts: An admin, a helpdesk technician and an HR associate.

Admin account: This account has unrestricted access to all the product’s modules and features including product configuration and administration.

Helpdesk technician: This default helpdesk account comes with ‘reset password’ privilege/role. If needed, you can delegate more roles to this technician account.

HR Associate: This account has the privilege to create new user accounts in Active Directory. This account can also be enriched as needed, by delegating more roles.

Technician Accounts: These are user accounts that you import into ADManager Plus from your Active Directory. Their access to the product’s modules and features can only be as wide and deep as you want them to be. By delegating the appropriate roles to them you can allow these accounts to perform only specific actions/tasks as required.

When technicians access ADManager Plus, they will be able to view/access only those modules and features delegated to them by the administrator.

Access to ADManager Plus’s Features

Immaterial of the account type, the permissions associated with all these accounts are totally

product-specific. That is, all the permissions assigned to them have effect only in ADManager Plus and

have no effect in Active Directory. The actual rights of users in Active Directory remain untouched.

1.

2.


3. Management Module: Active Directory, MS Exchange,Office 365, Skype for Business (Lync), and Google Apps

ADManager Plus’s management module offers the ability to manage Active Directory, multiple versions of Exchange Server, Office 365, Skype for Business, and Google Apps from just one single web-based

The management module contains the most frequently performed tasks like user creation, password reset, Exchange mailbox creation, etc. as predefined actions. To perform any task, you will have to just click on the required task and specify the accounts/objects that you wish to manage.

Moreover, ADManager Plus also helps you manage multiple accounts in a single step through its bulk management actions. It also offers template and CSV-based management.

For all management actions, ADManager Plus makes the required changes/updates in the Active Directory. It then updates in its database the objects or accounts for which the management actions were performed, the changes/actions that were performed and also the new or updated values to keep track of the actions performed.

ADManager Plus Management Module


One-step provisioning of user accounts across multiple platforms with all the required settings including

Exchange mailboxes, Lync/LCS/ OCS and Google Apps settings,

Appropriate group memberships and privileges,

Office 365 licenses, and much more.

All-inclusive user provisioning and re-provisioning templates – Fine tune and standardize the user creation and modification processes as per the organizational policies; configure rules to auto-populate specific user attributes based on certain conditions.

Bulk management actions – Manage multiple users, groups, computers and contacts objects at one go, via CSV import.

MS Exchange Server Management – Create, modify, migrate, delete Exchange Mailboxes for users, configure the Exchange limits, enable/disable OWA, OMA, Active Sync, etc. for multiple users at one go.

Office 365 Management – Provision users and assign/modify/revoke licenses.

Google Apps User Provisioning – Create users in Google Apps.

Skype for Business (Lync) Management – Create, delete, disable/enable Skype for Business (Lync) user accounts and modify policies (Conferencing, Archiving, and Telephony) of specific users.

File Server Permissions Management – Grant, modify, revoke NTFS and Share permissions of users and groups, in bulk.

Automated AD management – Auto-execute tasks/processes like user creation, user modification, AD cleanup, etc.

Highlights


4. Reporting Module: Active Directory, MS Exchange,Office 365, and Google Apps

ADManager Plus’s reporting module offers 150+ ‘out-of-the-box’ reports that fetch important informa-tion like inactive users, locked out users, distribution group members, compliance reports (SOX/HIPAA), etc. instantly.

These reports are organized into multiple categories like user reports, password-based reports, group reports, Exchange reports, etc. for easy retrieval of the required data.

ADManager Plus reports also have built-in management options that enable you to execute management tasks right from the reports. For example, to unlock users, you can just generate the list of locked out users and unlock them using the unlock option located within the report.

Moreover, the ‘report scheduler’ makes it easy to schedule the generation of required reports. You can also configure this scheduler to email the reports to multiple users.

Whenever a report has to be generated, ADManager Plus fetches the relevant data from all the specified OUs in Active Directory and updates it in its database. It then displays this data to you in a format that is simple and easy to read and understand.

Active Directory Reports


150+ pre-built reports in multiple categories like User Reports, Password Reports, Group Reports,

Computer Reports, Contact Reports, Exchange Reports, GPO Reports, Compliance Reports, OU

Reports, Office 365 reports, Google Apps reports, etc.

Management from reports – Perform vital account management actions like enable, disable,

move, delete, etc. right from the reports.

Report Scheduler – Auto-generate all the required reports for all the required OUs/ domains, at the

exact time specified.

Export/ email reports – Export or even deliver the reports to multiple users as email attachments

in different formats like Excel, PDF, HTML, CSV, etc.

Report customization to get the exact information that you need by displaying only those attributes

that you need.

Highlights


5. Customizable Workflow

ADManager Plus’s workflow offers multiple levels (request, review, approve, and execute) which can be customized as per your needs. The review-approve model standardizes the process of executing management tasks and prevent unauthorized/harmful changes. Workflow also allows you to write ‘assignment rules’ to expedite the execution of tasks by automatically assigning them to appropriate technicians based on their expertise.

Customizable workflow to specify the execution flow or path for every task; ensure adherence to the required IT compliance standards and also organizational policies.

Assignment rules help you automatically assign requests to the appropriate technicians who are best suited for the tasks.

Notification rules to auto-update all the stake holders via email, about the status of tasks as they progress along each stage of the workflow.

Customizable requester roles to specify the tasks for which a requester or a user can create a request.

Request repository that lists all requests that a requester or a technician has created; you can also list all the requests that have been assigned to the technician.

Highlights

Customizable Workflow


Help Desk Delegation

6. Help Desk Delegation

ADManager Plus delegation helps administrators offload excessive burden off their backs by empowering non-administrative users, non-technical/business users (HR, department heads, etc.) to perform repetitive tasks.

You can select any user from your AD and make a help desk technician out of that user. For example, you can select a user from the HR department and assign ‘create and modify users’ role to them. This will enable that HR executive to create new users whenever new employees join or modify users whenever promotions, transfers, or role changes occur, without depending on the IT department to help them.

Secure and non-invasive delegation model – The rights/privileges assigned technicians are purely at the product level and their actual privileges in Active Directory remain untouched.

Customized roles – A variety of roles can be created to give technicians the ability to perform different tasks (example: reset passwords, move users, generate group reports, etc.).

Role-based/profile-based delegation of tasks to help desk technicians; only those modules/features assigned to technicians will be visible to them.

OU-specific administration enables technicians to perform different set of tasks in different OUs. For example, a technician can create and modify users in OU1, create computers in OU2, create and modify groups in OU3, etc.

Cross-domain/multi-domain delegation allows technicians to perform the designated tasks in multiple domains.

Audit reports – Get a trail of all the actions that a help desk technician has performed and all the actions that have been performed on a technician or role.

Highlights


Active Directory Automation

7. Active Directory Automation

ADManager Plus’s automation ensures error-free execution of frequently performed tasks (reset password, unlock accounts, etc.). Automation offers administrators more freedom, peace of mind, and time to focus on the truly important and mission critical tasks.

Automation Policy helps automate any often repeated or critical Active Directory management tasks; also allows you to set up a series of follow up tasks along with their execution sequence.

Automation helps specify the time of execution for the tasks that have to be automatically executed, set the frequency at which these tasks have to be performed, and also specify the appropriate input for these tasks.

Controlled Automation makes the task execution follow the review-approval process specified in workflow.

Highlights


ADManager Plus iOS & Android Apps operational flow

8. ADManager Plus Mobile Apps

The native iOS and Android apps of ADManager Plus put you in control of all your user accounts, even when you are ‘on-the-move’. Using these mobile apps, you can connect to your ADManager Plus server and manage all the user accounts right from your mobile devices.

AD user management – Reset password, unlock, enable/disable, delete.

AD users' group membership management.

Workflow – View, manage, and execute requests for AD management and reporting tasks.

AD user reports – All, locked out, disabled, password expired, and inactive.

Currently, ADManager Plus mobile apps offer the following features:

9. ADManager Plus Support


You can get a first-hand experience of managing your AD, Exchange, Office 365, Skype for Business, and Google Apps via ADManager Plus using the 30-day free trial.

For a personalized demo of ADManager Plus, or any further information, you can contact our support team 24*5

Visit www.admanagerplus.com for in-depth information about the solution and all its features.

Email:

[email protected]

Dial Toll Free:

+1 925 924 9500 (Toll Free)

+1 408 916 9393 (Direct)

Or

Or

Name :

Email :

Description :

Get a Free Personalized Demo

solution document - manageengine · pdf filesolution document . ... management module: active...

Documents